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{U) Are Furbies OK in NSA? 
Classification: Feve 


Entered from: 


Subject: iristmas toys with AI 
Date: Wed, 9 Dec 1998 14:31:00 -0500 ae 
Classification: UNCLASSIFIED ee 
%-Skyway-In: 
X-Skyway-Out: 


Classification: UNCLASSIFIED a 
Security Control Marking: SeR-SPFEeCEtS-USsi-enat . 
Hi There, ae? ase, on fs 
It has come to my attention that a new toy ob’ the market hds an 
Artificial Intellgent chip on-board. An office J recently vistred 
had two of these in their spaces. Apparéntly,’ these stuffed z 
critters learn from nearby speech pattems. + Lt would seem’ to me 
that this might be a security issue,+in that,they can pick up‘any 
spoken language and repeat it. I beltieva*these things are called 
“Fropie’s", but I‘m not sure. But,* my undérstanding is fhat -these 
guys contain a writeable chip. + "That would definitely be a security 
concern. Please help clear tHis up.,” + ‘A 2 


Thanks... ‘ os . 


X-Skyway-In: > 
X-Skyway-Out: 


Classifichtion: S@R=OSMECSHtven-ONet 
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is aware..+°* 


FURBIE ALERT - 


“Personally owned photographic, video, and audio recording equipment are 
prohibited items. This includes toys, such as "Furbies" with built in 
recorders that repeat the audio with synthesized sound to mimic the original 
audio signal. Please do not introduce these into NSA spaces. Those who have 
should contact their SSO for guidance."." 
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Posted on: December 15, 1998 
{U) Are Furbies OK in NSA? 


QUESTION: (U) It has come to my attention that a new toy on the 
market contains an artificial intelligence chip. An office I recent- 
ly visited had two of chese toys in their spaces. Apparently, these 
stuffed critters learn from nearby speech patterns. It would seem 
to me that this might be a security issue, in that they can pick up 
any spoken language and repeat it. My understanding is that these 
toys contain a writeable chip. Isn‘t this a security concern? 


POLICY CN-LINE ANSWER: (U) This question refers to “Furbies," the 
latest “must-have” toy. We asked Security On-Line to provide us with 
an answer. Here ic is: 


(U) FURBIE ALERT 


(U) Personally owned photographic, video, and audio recording e: 
ment are prohibited items. This includes toys, such as "Furbies," 
with built-in recorders that repeat the audio with synthesized sound 
to mimic the original audio signal. We are prohibited from intro- 
ducing these items into NSA/CSS spaces. Those who have should con- 
tact their SSO for guidance. 


8412, (Fee. 963-6651, 12/15/98, 1998 12 15) 


DERIVED From: NSAACSS MANUAL 123-2 
GATED: 24 Fas 1998 
OEDLASSIFY ON: K1,, #3, HB, KB, K7, KB 
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Posted to NSA's Policy On-line on 15 December 1998 
(U) Are Furbies OK in NSA? 


QUESTION: (U) It has come to my attention that a new toy on the 
market contains an artificial intelligence chip. An office ] recent- 
ly visited had two of these toys in their spaces. Apparently, these 
stuffed critters learn from nearby speech patterns. It would seem 
to me that this might be a security issue, in thet they can pick up 
any spoken language and repeat it. My understanding is that these 
toys contain a writeable chip. Isn’t this a security concern? 


POLICY ON-LINE ANSWER: (U) This question refers to “Furbies,” the 
latest “must-have” toy. We asked Security On-Line to provide us with 
an answer. Here it is: 


(U) FURBIE ALERT 


(U) Personally owned photographic, video, and audio recording equip- 
ment are prohibited items. This includes toys, such as "Furbies," 

with built-in recorders that repeat the audio with synthesized sound 

to mimic the original audio signal. We are prohibited from intro- 
ducing these items into NSA/CSS spaces. Those who have should con- 
tact their SSO for guidance. 
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(U) Are Furbies OK in NSA? 
ID: 6833712 


- Posted on: December 15, 1998 


Subject: (U) Are Furbies OK in NSA? es 


(U), Are Furbies OK in NSA? . 


QUESTION: (U) It has come to my attention that @ new toy on the 
market contains an artificial intelligence chip. An office I recent- 
ly visited had two of these toys in their spaces. Apparently, these 
stuffed critters learn from nearby speech patterns. It would seem 
to me that this might be a security issue, dn that they can pick up 
any spoken language and repeat it. My undefstanding is that these 
toys contain a writeable chip. Isn‘t thie a security concern? 


POLICY ON-LINE ANSWER: (U) This questién refers to "Furbies," the 
latest "must-have" coy. We asked Security On-Line cto provide us with 
an answer. Here it is: 4 , 


(U) FURBIE ALERT . 


(U) Personally owned phocograp}fic, video, and audio recording equip- 
ment are prohibited items. This includes toys, such as "Furbies,* 
with built-in recorders that,‘repeat the audio with synthesized sound 
to mimic the original audio.signal. We are prohibited from intro- 
ducing these items into NSA/CSS spaces. Those who have should con- 
tact their SSO for guidange. 


C8 963-6651, 12/15/98, 1998 12 15) 


(b) (3)-P.L. 86-36 


How well did this answer your question? 
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Posted on: January 15, 1999 


(U) Anonymous Question About Furby Article in Press 


QUESTION: (U) I noticed an article in the newspaper which apparently 
was based on the Policy On-Line article about Furbies in the work- 
place. I have a couple of questions - 


1. (v) Was the release of the Policy On-Line article, or the 
information in the article, subject to prepublication review? 


2. (U) Isn‘t there a regulation governing employee interaction 
with the media, or was this information released by the NSA 
Public Affairs Office? 


POLICY ON-LINE ANSWER: (U) For our readers who aren’t aware, this 
question refers to the fact that our 15 December 1998 article 
entitled "Are Furbies OK in NSA?" appeared almost verbatim in the 
13 January 1999 Washington Post, in an article entitled "A Story of 
Hairy Espionage - NSA Bans Furby From Spy Agency's Premises." The 
story also showed up in other print media, as well as radio and 

TV news broadcasts. : 


(U) Yes, the information was subject to prepublication review. The 
real question to ask is "Did the information undergo prepublication 
review prior to being released?" That answer would be "No, it did 
not." 


(U) Yes, there is a regulation governing employee interaction with 
the media (NSA/CSS Regulation 10-70, "Media Contacts"), and the 
Public Affairs Office became aware of the document's release to the 
media when the reporter called. 


(U) The public dissemination of Agency or Intelligence Community 
Information requires prepublication review by N5P6 and approval by 
NSA Public Affairs, or review and release under the provisions of 
the Freedom of Information Act or Privacy Act. Even if information 
(electronic or otherwise) is not specifically marked as classified 
or FOUO, or is actually marked as unclassified, you may NOT assume 
that it is unclassified and/or authorized for release--it must be 
vetted through N5P6 for classification review and any public/media 
disclosure is REQUIRED to be approved through NSA Public Affairs. 
Government records, electronic or paper, are also subject to public 
disclosure under the stipulations of the Freedom of Information Act 
(FOIA) and the Privacy Act (PA). 


(U) Furthermore (as we have stated here on many occasions), each NSA 
employee or affiliate who has signed a nondisclosure agreement as 

a condition of employment or affiliation is bound by virtue of 

that agreement not to disclose any information about NSA or the 
Intelligence Community without the express approval of NSA Public 
Affairs or unless that information has been release under the FOIA 
or PA processes. Of course, the nondisclosure agreement is a written 
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contract and legal remedy for a violation of the agreement could be 
sought as well. 


(U) The information provided to the media, referred to in the 
question above, appears to have been provided by an individual who 
chose not to honor that agreement. There are channels for seeking 
the release of such information, but they were circumvented in this 
Case. There are mechanisms for challenging Agency decisions, but 
the individual in this case apparently chose to ignore those. 


(U) You are also reminded that it is your responsibility not to 
comment further upon or provide additional detail about information 
which is publicly released. This is most imperative in cases where 
classified information may have been compromised or improperly 
released. 


(U) If you want to go back and see the articles we've posted in 

the past concerning our nondisclosure obligations, or those regarding 
our responsibilities in regard to interactions with the public and 
media, use the POL database to access the following: 


- (U) Reminder About Handling Inquiries from the Media, 03/02/95 

~ (U) REMINDER TO THE WORKFORCE - Employees’ Responsibility in 
Regard to Interaction with the Public and Media, 03/31/95 

- (U) Media Contacts, 05/12/95 

- (U) Employee Responsibilities and the Nondisclosure 
Agreement, 07/19/95 

- (U) Reminder to Workforce - Employees’ Responsibility in Regard 
to Interaction with the Public and Media, 07/28/95 

- (U) Another Reminder About Your Responsibilities with Regard to 
Interaction with the Public and Media, 03/24/97 

- (U) Unauthorized Disclosures Process, 06/04/98 

- (U) Our Non-disclosure Obligations, 10/32/98..+ 
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